Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
File:                     B6DA2BD8E33F11EB9832A354C4F9AE02.roa (raw, json)
Hash identifier:          26mWB8zG4LLxXwZuD8Itp5HpladqjmY8n4AL8D2lrVk=
Subject key identifier:   EC:81:BC:80:72:6A:F3:3B:0D:3F:96:66:2C:73:0D:D7:EB:E6:E8:C6
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       12E6
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
Signing time:             Fri 30 Jun 2023 17:36:05 +0000
ROA not before:           Fri 30 Jun 2023 17:36:05 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     137443
IP address blocks:        103.117.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 17:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4838 (0x12e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Jun 30 17:36:05 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649f1285-2836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:18:a8:8b:af:b8:7d:50:7f:55:85:d9:5f:
                    54:67:94:17:3a:69:ed:fd:92:16:47:90:bd:b0:ee:
                    f3:ba:c1:1b:49:09:0e:dd:95:68:18:51:88:9b:c1:
                    d0:6c:fa:9d:7b:9b:d5:09:00:37:1f:35:4c:41:c0:
                    20:49:77:78:d7:90:f1:6f:26:f0:c7:f4:ec:9e:a8:
                    36:68:5f:f9:a0:03:87:de:f4:7b:e7:27:2c:a5:b7:
                    1c:60:75:83:69:99:c1:e6:37:5c:6e:f8:37:27:2f:
                    d1:b8:34:8a:14:10:a8:78:4c:c5:85:d3:85:f3:8e:
                    82:fe:fb:c6:48:36:c6:f4:53:90:b5:50:db:f9:cc:
                    44:37:0f:80:54:78:e6:a1:ce:9d:4b:2f:ce:1d:4b:
                    34:50:a9:75:57:05:b0:0e:f0:a8:33:e7:8f:ad:4f:
                    dd:bf:7b:1f:a0:5a:85:66:db:fb:de:01:dc:8e:7f:
                    ad:fe:92:26:3f:de:38:b1:4a:ad:c1:56:7f:49:81:
                    50:00:c9:85:36:07:60:9a:d1:e1:c5:b9:eb:87:99:
                    76:f8:cf:53:a5:03:87:72:e0:9c:cd:fa:5f:16:84:
                    73:1c:7e:7f:22:40:1b:28:96:d0:b4:c6:b4:3c:75:
                    aa:c2:0a:a4:5e:ab:dd:54:1e:1c:7f:16:8f:f5:ed:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:BC:80:72:6A:F3:3B:0D:3F:96:66:2C:73:0D:D7:EB:E6:E8:C6
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/B6DA2BD8E33F11EB9832A354C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:8b:fb:cf:4a:23:a2:9e:1e:56:2c:74:48:42:7f:43:19:4b:
         ea:e1:de:5f:f7:0f:8f:fe:5d:58:b2:63:c7:d4:57:ab:31:e7:
         c1:32:e8:76:b8:bd:5e:2e:6e:39:48:b0:8d:74:66:5c:a6:02:
         c3:c4:20:1a:13:93:2b:0a:b2:fd:f7:ac:dc:2a:2e:21:87:5a:
         ff:6d:14:ba:41:a1:d5:3f:72:23:09:46:e1:cc:d3:ca:2a:b2:
         56:e6:86:4e:ab:ed:c9:af:a3:bd:58:54:bd:30:9b:f9:d2:ee:
         ad:58:48:b7:ac:a8:ed:51:b1:e6:45:d3:49:0c:e1:2c:e8:33:
         0c:f7:6e:86:a1:fc:02:35:8a:4f:e1:55:2d:2c:44:ac:18:62:
         71:c5:ad:e1:6b:e8:7f:5b:e9:d8:e3:c1:8e:35:53:aa:40:44:
         4b:0f:d5:69:b9:b3:90:13:69:d7:52:b5:87:c6:3f:a1:ff:eb:
         4d:55:cd:b9:78:1b:13:3b:91:4f:66:fe:a7:6a:15:42:b1:8e:
         1b:43:e8:e0:57:7c:bb:5a:dc:46:e9:c4:50:59:03:e3:d1:08:
         b6:52:33:91:a1:ee:df:45:96:f3:90:29:47:4e:92:76:fb:eb:
         e2:1a:62:8d:2f:bc:33:90:79:72:93:90:b6:28:c8:b8:d1:ec:
         2a:31:5e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:31:05 2024 by rpki-client on console-fra.rpki-client.org